AZL-81101 CVE-2026-21712 affecting package nodejs24 for versions less than 24.14.1-1

A flaw in Node.js URL processing causes an assertion failure in native code when url.format is called with a malformed internationalized domain name IDN containing invalid characters, crashing the Node.js process...

AlmaLinux 10 : nodejs24 (ALSA-2026:1842)

The remote AlmaLinux 10 host has packages installed that are affected by multiple vulnerabilities as referenced in the ALSA-2026:1842 advisory. nodejs: Nodejs filesystem permissions bypass CVE-2025-55132 nodejs: Nodejs denial of service CVE-2026-21637 nodejs: Nodejs denial of service CVE-2025-594...

CVE-2025-27516 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2025-27516 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1

CVE-2024-34064 affecting package nodejs24 for versions less than 24.13.0-1. A patched version of the package is available...

RHSA-2026:1842 Red Hat Security Advisory: nodejs24 security update

Bulletin has no description...

Important: Red Hat Security Advisory: nodejs24 security update

An update for nodejs24 is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...

AZL-76200 CVE-2025-69418 affecting package nodejs24 for versions less than 24.13.0-3

Issue summary: When using the low-level OCB API directly with AES-NI orother hardware-accelerated code paths, inputs whose length is not a multipleof 16 bytes can leave the final partial block unencrypted and unauthenticated.Impact summary: The trailing 1-15 bytes of a message may be exposed...

AZL-76335 CVE-2025-10585 affecting package nodejs24 24.13.0-3

Type confusion in V8 in Google Chrome prior to 140.0.7339.185 allowed a remote attacker to potentially exploit heap corruption via a crafted HTML page. Chromium security severity: High...